$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft File: Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft (raw, json) Hash identifier: l3wkqaUY3A0lGge5njirxcusOT4Nxw8Q1W/UYB76KaI= Subject key identifier: 2B:26:EC:F9:00:13:2B:52:25:83:7E:19:7D:21:A1:56:04:64:0E:49 Authority key identifier: 27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95 Certificate issuer: /CN=A91D6DBD/serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595 Certificate serial: 0232 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft Manifest number: 0225 Signing time: Mon 21 Sep 2026 02:52:59 +0000 Manifest this update: Mon 21 Sep 2026 02:52:58 +0000 Manifest next update: Mon 28 Sep 2026 02:52:58 +0000 Files and hashes: 1: Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl (hash: l1bePpXP6IwROV3+RAZyawXpNU47BnFf2swgxbNvWgQ=) 2: 2ADA37E6790F11EE99D7CB43C4F9AE02.roa (hash: Wwr1Eqq/L0YHNdQH3zpO8YtN+8gSRENMy82vCTfRXz8=) 3: 72F76026790A11EE88F94A29C4F9AE02.roa (hash: 4fKiOKauzOW+Tltjqnic8gI8N5qp2KLhMHqhuZ8QyQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DBD, serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595 Validity Not Before: Sep 21 02:52:58 2026 GMT Not After : Sep 28 02:52:58 2026 GMT Subject: CN=6ab09c0b-9642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bb:fa:e9:11:b6:74:b9:ee:c7:68:55:70:99: 79:5c:fa:fa:d8:0c:f3:8a:a5:8c:b5:a1:1a:fe:db: 2c:71:9a:c9:b7:f3:bc:f5:ba:7f:d6:f2:25:aa:14: 6e:82:c4:b9:4c:0d:70:e6:fe:42:7e:58:89:40:90: 24:ea:da:10:7c:de:6a:94:24:fe:50:54:a7:e2:d1: 35:5d:1b:69:92:a4:8b:96:81:98:f6:47:3d:64:0c: 19:2c:4f:2a:08:5c:ae:12:55:c9:cf:de:0d:fc:c1: d1:90:f7:3a:be:25:f2:40:da:d6:08:2e:2a:3f:2e: 21:ec:c0:9e:da:90:df:02:1d:4d:3d:17:53:52:59: c5:60:c2:68:dd:d3:90:5f:24:80:72:5a:c2:64:8c: 05:d5:78:6a:a6:b5:0f:ef:11:aa:6e:ac:fb:56:d4: 9f:4d:91:90:d3:29:64:ec:0b:4b:1f:94:6e:61:4e: 9c:76:12:c9:70:1f:dd:fd:f8:84:55:8c:29:eb:fb: 3c:5d:38:5e:c4:d1:cc:48:0a:6f:01:30:05:0a:3d: 0d:60:eb:f5:8b:89:b2:ca:6e:f0:4e:29:47:cd:99: 0e:0b:77:c6:26:7b:80:04:94:f6:f5:fa:71:63:f8: 76:ee:a9:ee:e5:7d:d8:5d:5c:8c:47:a9:70:e2:d4: a9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:26:EC:F9:00:13:2B:52:25:83:7E:19:7D:21:A1:56:04:64:0E:49 X509v3 Authority Key Identifier: keyid:27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:df:d8:6c:ce:01:ed:2e:44:7c:37:92:82:26:d3:89:bb:b5: f5:39:e3:90:9a:25:38:dd:57:0b:6d:0f:00:76:e7:25:01:60: 7c:0d:b5:d8:f3:09:73:b1:33:f8:21:93:98:44:9d:0d:c1:e2: f4:86:df:25:dc:42:a9:64:e3:8e:f4:6a:2c:42:eb:97:54:72: 48:37:5e:38:48:23:e1:22:40:fe:ef:d5:d8:3c:69:06:b5:f2: 34:6a:37:3a:95:6b:d2:e6:22:9c:a9:b7:7f:a3:bb:d1:68:b7: 1c:c0:0d:c0:00:38:92:32:37:16:bd:6c:1c:51:df:4d:10:ea: e5:f4:3f:44:76:64:39:5f:fd:e4:6a:90:5c:c1:be:d0:3e:15: 61:94:5e:6c:b7:b8:1c:be:58:94:35:21:2e:fe:92:0c:ba:b0: 3a:45:a8:e4:24:5a:17:46:fc:65:73:b5:ef:18:e7:82:65:be: 40:73:bb:5d:fe:53:af:8d:d6:e2:b1:03:30:4e:01:b8:fe:66: f5:33:18:46:40:1f:d8:76:bc:d6:2d:d5:c5:cf:da:89:54:69: 19:20:0b:b0:e3:84:17:40:10:f4:6f:58:5b:05:8e:0b:da:04: 26:17:94:c7:0e:6b:bb:d6:b2:b5:04:56:73:b5:d5:74:eb:bb: e9:97:45:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZEQkQxMTAvBgNVBAUTKDI3MkQ3MUFENjI2NDU3NzVDQ0RGQkI1NzcwNDc4RTU5 NDNFQTY1OTUwHhcNMjYwOTIxMDI1MjU4WhcNMjYwOTI4MDI1MjU4WjAYMRYwFAYD VQQDEw02YWIwOWMwYi05NjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Lv66RG2dLnux2hVcJl5XPr62AzziqWMtaEa/tsscZrJt/O89bp/1vIlqhRu gsS5TA1w5v5CfliJQJAk6toQfN5qlCT+UFSn4tE1XRtpkqSLloGY9kc9ZAwZLE8q CFyuElXJz94N/MHRkPc6viXyQNrWCC4qPy4h7MCe2pDfAh1NPRdTUlnFYMJo3dOQ XySAclrCZIwF1XhqprUP7xGqbqz7VtSfTZGQ0ylk7AtLH5RuYU6cdhLJcB/d/fiE VYwp6/s8XThexNHMSApvATAFCj0NYOv1i4myym7wTilHzZkOC3fGJnuABJT29fpx Y/h27qnu5X3YXVyMR6lw4tSp0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCsm7PkA EytSJYN+GX0hoVYEZA5JMB8GA1UdIwQYMBaAFCctca1iZFd1zN+7V3BHjllD6mWV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRCRC9GOUMwRTExRTc5 MDkxMUVFOTlFREQxMUZDNEY5QUUwMi9KeTF4cldKa1YzWE0zN3RYY0VlT1dVUHFa WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0p5MXhyV0prVjNYTTM3dFhjRWVPV1VQcVpaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRCRC9GOUMwRTExRTc5MDkxMUVFOTlFREQxMUZDNEY5QUUwMi9KeTF4cldKa1Yz WE0zN3RYY0VlT1dVUHFaWlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2t/YbM4B7S5EfDeSgibTibu19TnjkJolON1XC20PAHbnJQFgfA212PMJc7Ez +CGTmESdDcHi9IbfJdxCqWTjjvRqLELrl1RySDdeOEgj4SJA/u/V2DxpBrXyNGo3 OpVr0uYinKm3f6O70Wi3HMANwAA4kjI3Fr1sHFHfTRDq5fQ/RHZkOV/95GqQXMG+ 0D4VYZRebLe4HL5YlDUhLv6SDLqwOkWo5CRaF0b8ZXO17xjngmW+QHO7Xf5Tr43W 4rEDME4BuP5m9TMYRkAf2Ha81i3Vxc/aiVRpGSALsOOEF0AQ9G9YWwWOC9oEJheU xw5ru9aytQRWc7XVdOu76ZdFtQ== -----END CERTIFICATE-----Generated at Mon Sep 21 18:04:01 2026 by rpki-client